This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34362e31362f32392d3239203d3e20323634373136.roa
File:                     3137302e3135302e34362e31362f32392d3239203d3e20323634373136.roa (raw, json)
Hash identifier:          7JKwqYSvjLQo+afRP9Un9DnyapThAzpQg4MGL5BF5+Y=
Subject key identifier:   7D:AE:85:1D:4B:B7:D0:80:9A:89:87:8F:FF:BD:CC:D2:8E:A4:E1:CA
Certificate issuer:       /CN=6DE888EFA2956802EC74153A5670BFB030384D0F
Certificate serial:       5B24B447353058033AB1B1F0B5CFB1563885EF51
Authority key identifier: 6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34362e31362f32392d3239203d3e20323634373136.roa
Signing time:             Tue 06 Jan 2026 19:20:05 +0000
ROA not before:           Tue 06 Jan 2026 19:15:05 +0000
ROA not after:            Tue 05 Jan 2027 19:20:05 +0000
asID:                     264716
IP address blocks:        170.150.46.16/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:b4:47:35:30:58:03:3a:b1:b1:f0:b5:cf:b1:56:38:85:ef:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE888EFA2956802EC74153A5670BFB030384D0F
        Validity
            Not Before: Jan  6 19:15:05 2026 GMT
            Not After : Jan  5 19:20:05 2027 GMT
        Subject: CN=7DAE851D4BB7D0809A89878FFFBDCCD28EA4E1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:3a:db:7d:aa:1e:9c:23:55:90:d9:71:39:
                    66:f6:e5:14:6e:12:ad:9a:f8:bb:17:d3:50:d0:13:
                    63:74:9c:e6:ba:f3:2a:f4:2f:7c:63:96:a1:bb:22:
                    e8:8e:e0:e0:4a:da:2e:2c:12:09:08:26:c6:b9:81:
                    43:60:16:9e:21:ac:f6:e5:1b:75:a3:f5:a5:b0:e4:
                    17:16:54:32:78:1e:46:a6:17:af:7f:7a:7c:81:81:
                    23:1b:45:43:88:79:2b:1d:e9:34:e3:91:d6:fc:5d:
                    a2:94:d1:da:a5:66:0a:6e:09:15:e3:fb:44:48:38:
                    1d:56:4a:c7:d5:a8:11:21:04:06:f8:8d:48:aa:89:
                    b5:76:82:80:47:44:0f:be:31:36:01:fb:6c:b3:cb:
                    cc:69:c1:2a:f2:a9:dc:99:ea:ff:e8:35:d2:f5:bc:
                    9d:3e:01:66:ca:bb:39:33:c4:87:e9:27:08:77:c7:
                    5f:89:f6:90:72:13:9c:04:10:d7:0b:27:82:5d:b9:
                    d7:6c:b4:cf:a4:f6:b0:2b:81:22:1d:84:69:cc:ee:
                    49:23:ac:59:05:b2:3d:0a:86:7a:8b:78:19:85:75:
                    da:47:65:b3:fe:f3:2a:bb:4a:62:24:b3:74:4f:fe:
                    3c:97:cd:fb:99:1b:64:27:3b:fc:b8:99:03:c1:34:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:85:1D:4B:B7:D0:80:9A:89:87:8F:FF:BD:CC:D2:8E:A4:E1:CA
            X509v3 Authority Key Identifier:
                keyid:6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34362e31362f32392d3239203d3e20323634373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.46.16/29

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:f8:b6:e6:61:9f:b9:ab:6a:35:ce:46:15:9c:d5:44:6e:
         79:c9:ea:87:da:c8:64:0c:5a:99:63:ad:bc:ec:fb:95:0f:be:
         27:89:d8:6a:2d:d1:00:8f:b8:f7:6a:75:26:e6:db:e8:17:8f:
         de:11:ef:b3:b9:02:3e:39:6d:f7:73:bd:1e:94:85:93:61:e1:
         a2:98:aa:2e:5a:4c:4d:6d:ee:8a:f4:79:6d:67:92:cb:63:b1:
         e8:51:ef:27:03:6e:ad:95:15:45:ac:18:a4:e4:4c:e2:c7:c6:
         89:21:81:10:c3:f8:aa:67:45:4e:80:4a:09:5c:26:2a:91:74:
         1e:bf:27:c0:73:36:67:7d:37:43:92:5e:b9:7e:3c:36:76:c9:
         fd:10:96:a4:70:31:7f:f3:0c:a7:9e:13:ec:b3:9c:05:39:1a:
         7c:6e:8f:5b:c6:57:62:d7:af:13:bf:86:eb:45:a7:cf:b1:1d:
         8c:aa:52:00:a4:36:d7:0d:27:fd:a4:75:7b:69:e2:52:b6:be:
         a1:76:8f:3d:7e:6b:08:02:39:02:1c:cd:ac:05:69:db:c3:a1:
         03:4f:8e:1d:25:af:70:50:84:b2:66:bc:6c:2a:a1:61:4a:99:
         3b:6f:67:90:6a:57:b3:1e:c7:4d:2f:c8:b8:fb:df:96:05:94:
         f3:ae:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:56:58 2026 by rpki-client